Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/d614f553-ef0e-317b-958d-60d296bb2f4c.roa
File:                     d614f553-ef0e-317b-958d-60d296bb2f4c.roa (raw, json)
Hash identifier:          0p7WVyYpPUHI7n1beHWmpvOp+WqYIMmgS7x4HBusYWo=
Subject key identifier:   47:CF:EF:5F:C0:FB:38:43:FD:C0:08:E6:CB:28:B0:31:CD:96:E2:64
Certificate issuer:       /CN=31671c23-3278-409b-837d-7dfe69606940
Certificate serial:       010D0C9F4328584F94D30D3E261FE8C8C00D9E00
Authority key identifier: 67:16:23:E0:67:5A:30:1F:51:52:AF:3F:47:2F:FC:27:CE:8D:3F:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/d614f553-ef0e-317b-958d-60d296bb2f4c.roa
Signing time:             Thu 22 Oct 2026 01:00:12 +0000
ROA not before:           Thu 22 Oct 2026 01:00:12 +0000
ROA not after:            Wed 20 Jan 2027 02:00:12 +0000
asID:                     14618
IP address blocks:        170.62.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/31671c23-3278-409b-837d-7dfe69606940.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/31671c23-3278-409b-837d-7dfe69606940.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:94:d3:0d:3e:26:1f:e8:c8:c0:0d:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31671c23-3278-409b-837d-7dfe69606940
        Validity
            Not Before: Oct 22 01:00:12 2026 GMT
            Not After : Jan 20 02:00:12 2027 GMT
        Subject: CN=4dc9e3ed-0d06-4a2c-93bd-a7b72329dcc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:ed:d4:d7:99:68:0a:02:32:5a:69:0b:24:e6:
                    ee:c0:7a:fb:6d:89:8a:f6:98:6b:31:68:ef:2b:05:
                    2f:a3:77:e3:6f:0b:73:1c:71:67:38:3e:83:86:a8:
                    19:bf:a5:1f:78:d5:66:06:b3:78:b0:9f:8f:39:19:
                    26:88:7d:33:c2:cf:b0:92:95:bd:4e:8f:d8:cf:ac:
                    c3:6b:17:88:2f:3c:24:78:2f:52:90:e8:5c:cf:d2:
                    ec:04:7e:c5:1c:52:0b:96:ad:2a:5c:d2:b0:11:36:
                    5d:3f:63:f0:28:c9:ce:9e:78:fa:13:99:b1:c0:7a:
                    5f:8a:b7:6f:4d:b4:bf:ea:3f:f1:bf:07:d7:a0:10:
                    f3:72:72:86:7e:e2:d6:94:32:52:04:ed:be:df:99:
                    c3:b2:71:b6:02:6f:c2:da:4c:65:c0:c6:20:cb:6b:
                    d3:eb:eb:25:e1:49:34:cc:65:6f:11:97:c5:cd:91:
                    a8:4f:d6:91:00:ee:4c:42:75:e7:49:3a:b6:4b:e8:
                    8c:9c:62:65:28:59:8a:6d:73:5f:14:f0:ff:79:fc:
                    ec:ad:b8:07:47:2a:7a:36:ae:5e:58:2a:eb:f4:38:
                    85:40:3d:bf:86:2f:41:7f:85:3f:fa:7d:fb:8a:9d:
                    64:8e:68:b7:c9:9f:7b:7b:e3:27:f1:66:3a:2d:35:
                    2b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:CF:EF:5F:C0:FB:38:43:FD:C0:08:E6:CB:28:B0:31:CD:96:E2:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/d614f553-ef0e-317b-958d-60d296bb2f4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/31671c23-3278-409b-837d-7dfe69606940.crl

            X509v3 Authority Key Identifier:
                keyid:67:16:23:E0:67:5A:30:1F:51:52:AF:3F:47:2F:FC:27:CE:8D:3F:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.62.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:ff:e8:ad:60:66:23:c3:cb:96:8a:ee:bb:b1:1e:bc:55:f0:
         3b:81:d3:90:6b:d3:d8:d3:42:13:cb:44:6f:e7:cb:5d:c9:fd:
         86:d0:4c:ec:de:1c:b4:6f:54:2d:5a:8f:46:fa:9a:b5:cb:4c:
         e4:d8:9c:8e:c7:01:98:e8:b3:d1:b3:f2:e0:0c:86:4b:28:a6:
         2d:6a:34:82:e8:fa:a6:b1:16:82:d5:44:cb:78:bf:a8:37:8b:
         0e:71:43:b0:44:47:78:50:6c:b8:6b:db:58:12:c0:81:90:8b:
         78:28:5a:19:0d:fd:e0:59:92:d0:e2:f0:c6:5b:a8:07:8b:01:
         7e:bc:0d:55:70:4f:13:ae:d7:f5:6a:1f:83:aa:62:d2:5a:e9:
         5e:eb:3a:4e:e3:76:37:09:94:67:a6:4a:e9:39:7e:46:e5:cc:
         02:a3:c2:51:2e:fe:69:6f:31:aa:a1:45:3c:61:50:1b:cf:40:
         c3:94:24:c2:48:e5:d4:61:5e:89:21:6e:57:51:56:7f:98:ba:
         63:46:71:92:a3:3d:90:28:dc:48:c0:f2:dc:78:09:3c:5e:45:
         94:ce:01:7d:c2:0c:77:f3:18:95:5b:ac:6a:8b:05:14:b5:8d:
         60:de:78:8b:bd:c9:0d:89:a3:f1:5b:9d:30:cf:00:71:7d:f2:
         2c:36:c8:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:20:04 2026 by rpki-client